skysight-inc/HackerNews huggingface dataset:
Apple[1], Google[2], and Microsoft[3] you say?

You say this as if being shamed into patching the occasional vuln is equivalent to security best practices.

Open code which can be independently audited is only a baseline for trustworthy code. A baseline none of those three meet. And one which by itself is insufficient to counter a reflections on trusting trust style attack. For that you need open code, diverse open build toolchains, and reproducible builds. None of which is being done by those three.

Are you getting your ideas about security from the marketing department?

1: https://arstechnica.com/security/2024/03/hackers-can-extract...
2: https://www.wired.com/story/google-android-pixel-showcase-vu...
3: https://blog.morphisec.com/5-ntlm-vulnerabilities-unpatched-...
Sure, and they do that because Microsoft's CSAM detection product (which other providers like Google supposedly use) operates by having unencrypted data access to your files in the cloud.

What Apple wanted to do is do those operations using homomorphic encryption and threshold key release so that the data was checked while still encrypted, and only after having a certain number of high likelihood matches would the possibility exist to see the encrypted data.

So the optimistic perspective was that it was a solid win against the current state of the industry (cloud accounts storing information unencrypted so that CSAM products can analyze data), while the pessimistic perspective was that your phone was now acting as a snitch on your behavior (slippery slope etc.)
Show HN: DataBridge - An open-source, modular, multi-modal RAG solution
For the past few weeks, I've been working on DataBridge, an open-source solution for easy data ingestion and querying. We support text, PDFs, images, and as of recently, we've added a video parser that can analyze and work well over frames and audio. We are also adding object tracking to improve video ingestion and context, and plan to do this for various data types.

To get started, you can find the installation section in our docs at https://databridge.gitbook.io/databridge-docs/getting-starte.... There are a bunch of other useful functions and examples available there. Our docs aren't 100% caught up with all these new features, so if you're curious about the latest and greatest, the git repo is the source of truth.

We're still shaping DataBridge (we have a skeleton and want to add the meaty parts) to best serve the LLM and RAG developer community, so I'd love your feedback about what features you're currently missing in RAG pipelines, whether specialized parsing (e.g., for medical docs, legal texts, or multimedia) is something you'd want, what your ideal RAG workflow looks like, and what some must-haves are.

Thanks for checking out DataBridge, and feel free to open issues or PRs on GitHub if you have ideas, requests, or want to help shape the next set of features. If this is helpful, I'd really appreciate it if you could give it a star on GitHub! Looking forward to hearing your thoughts!

Happy building!
If I stir a cup (or even a rectangle) of water, it will start swirling. Why does this not swirl? Local chaos, dissipates quickly, bulk flow does not sustain.
You can start with this https://github.com/apple/swift-homomorphic-encryption

Of course it is not the whole technology stack, but it is something at least. If your evaluation leads to potential problems, you can create issues right there on the github project!
Agree the rate of top US companies hiring foreign tech workers has massively increased in the past decade. But no, its not at the expense of US citizen employees. I work at a FAANG (5+ years at one, 10_+ years in other big companies). We are actively hiring great talent. The majority is white males, because...statistics. HR recruiters try to serve us a diverse pool of resumes/candidates to screen but its actually hard to find enough to fill all the roles we're hiring for (in cloud computing). Results in teams of mainly white males. Hopefully your 'anecdotal experiences shared online' are just a subset of the few that don't make it past an initial screen vs. the majority that do.
If you can't tell if I'm being sarcastic about an LLM asking clarifying questions, you are possibly not great at using LLMs.

Prompting isn't necessarily the career some people wanted was sold as, but it's not a bad idea to practice a bit and build a sense of what a clear and effective prompt looks like.

-

To be clear, I get telling people it's a "you" problem every time an issue with LLMs comes up isn't helpful... but sometimes the disconnect between someone's claimed experience, and what little most people actually can agree LLMs are capable of is so great that it must be PEBCAK.

I just tried the original checkpoint of GPT 3.5 Turbo and it was able to handle drilling up and down in specificity as appropriate with the prompt: "I need you to help me remember a movie. Ask clarifying questions as we go along."
I wonder what happens if you set the "Expiration Date" on a data set... Does it delete itself? Require special flags to access? Throw an error every time the data is accessed? Prevent writing? Can you imagine someone putting in an expiration date a decade in the future and it goes unnoticed until it hits? And presumably, like the other options, it can't be modified after you create the data set.

What a truly frightening option to have on a server file system.
> without being able to look up the original texts myself

Rule of thumb: if you can't look up the original texts, you can assume they weren't actually in the training data. The training data is, however, likely to include a lot of people quoting those texts, meaning that the model predicts "SOURCE says OPEN QUOTATION MARK" and then tries to autocomplete it. If you can verify it, you might not need to; but if you can't verify it, it's certainly wrong.
On topics where humans spend their entire life studying I don't think you would be able to convince me an LLM is accurate unless you yourself are such an expert and your expertise is corroborated by other experts.
I have to ssh into different places quite frequently and keeping the zsh configuration synced was a pain. Fish had 95% of what I needed out of the box so rather than putting a ton of scripts in place, installing omz, plug-ins etc, I run a single install command.
This is just excusing a complete lack of creativity. If they won't adapt they deserve to fail.
They are allowed to try out new stuff as long as the baseline is also met. Hence no problem for Apple with MagSafe for example, because their laptops also have USB-C charging.
That COVID feature was opt-in. Author is complaining about a lack of opt in now.
This is so bad when compared to Japan.

I don't mean that to be mean, but there is so much improvement possible. I hope it will improve. I live in Switzerland and I cannot use public transport most if the time because there isn't any.
> It is literally your job.

It's not his occupation in some ways. He makes a lot more money from every other venture, so there is not a major economic incentive for him. Likewise, he works with creators and platforms that pull in big numbers of engaged viewers.
By default, capital will matter more than ever after AGI
>Replaced the PSU last. Right-click works. FML.

My experience is always replace DRAM, and then PSU, and then Swap Motherboard.

I don't think people realise how many faults there are with DRAM, PSU and MB. DRAM quality has gotten a lot better in the past 10 years so that is less of an issue. PSU, however it where cost cutting are and more often than not causes problems.
> why creating a file takes a page of options?

You're really creating a member of a data set. What you get is far more flexible than a file but equally more complicated. The options come in handy when you're sequencing job steps together, as they let you specify sharing, cataloging, and automatic deletion under one or more specific types of job results.

> whereas IBM seems to be making no effort to bring z/OS to the public, so why bother chasing it?

It's a valuable and interesting part of computing history and understanding it's workflows gives good insight as to why many organizations continue to use them. They fill a very unique use case and exploring that is very interesting and enlightening.

The core concepts haven't changed in 70 years. You can even play with them today since a previous OS, MVS, was released publicly, and has been maintained as an open source project in recent years. If you get the Hercules emulator you can run a fully legal mainframe OS distribution right out of the box.

It's a great gas. Highly recommend.
This has absolutely nothing to do with "might makes right". If a fast food store decides to offer a Vietnamese Peanut Burger and Sugar Cane Juice combo, nut allergy suffers are not "morally entitled" to a nut-free option and diabetics are not "morally entitled" to a sugar-free juice option. This applies whether the fast food store is a small family run business, or McDonalds.

To suggest that customers are "morally entitled" to a Samsung phone with zero tracking and zero telemetry is similarly absurd. If you don't like Samsung's product, don't buy it.
My first processor was an 8086 in an IBM clone. I loved that computer.
I think this actually produces HDR on my iPhone 15 Pro, which really makes it pop because not a lot of things do

Very cool!
> I think the 777 landing gear warning is based on flap position

It isn't. If you're within a thousand feet of terrain, a runway is nearby, and you're at an approach for landing speed, it blares "TOO LOW, GEAR" in the cockpit over and over again. If you're going faster than approach for landing speed or there is no runway, it instead blares "TOO LOW, TERRAIN".

Likewise if you deploy more than flaps 20 without the gear extended (regardless of your height above terrain or the presence of any runway), you get a master warning and "CONFIG GEAR" in red on the EICAS.
> Women athletes who are forced to wear what amounts to underwear when the men aren't - they have a valid complaint about uniform standards.

For what it's worth that was the same organization - FIDE - that has made those terrible choices in the past as well.
No Budget, No Plan, 15M Sales: How We Made Palworld
https://xcancel.com/RobertMSterling/status/1873174358535110953
Sebastian Lague recently created a related video for those interested in rendering fluids: https://www.youtube.com/watch?v=kOkfC5fLfgE
It's SK. Pilots are just ex air force guys, all Korean ethnicity
I run my own email server and get nearly zero spam due to the simple reverse DNS check which catch most of them, rspamd catches the rest. I have about 50 000 emails in daily with about 500 delivered and in those 500 about 20 which are spam.

Also, to remove the problem of false positive, refuse spam at the SMTP connection level and do not use a spam folder. This way users will get an MTA email in case of false positive.
> Feature Detection Is Better than Version Detection

The problem with feature detection (normally referred to as configuration probing), at least the way it's done in ./configure and similar, is that it relies on compiling and potentially linking (and sometimes even running, which doesn't work when cross-compiling) of a test program and then assuming that if compilation/linking fails, then the feature is not available.

But the compilation/linking can fail for a myriad of other reasons: misconfigured toolchain, bug in test, etc. For example, there were a bunch of recent threads on this website where both GCC and Clang stopped accepting certain invalid C constructs which in turn broke a bunch of ./configure tests. And "broke" doesn't mean you get an error, it means your build now thinks the latest Fedora and Ubuntu all of a sudden don't have strlen().
If you read the research you'd know that they don't have access to the vector either. They never decrypt the data. All operations on their server are done directly on the encrypted data. They get 0 information about your photos. They cannot even see which landmark your vector was closest to.
Flight hours are increasingly useless. The planes fly themselves enough that there are serious problems when something goes wrong and situational awareness is lacking.
I will have to disagree on that.

Cloud is simpler than conventional sysadmin, once its foundational principles are understood and the declarative approach to the cloud architecture is adopted. If I want to run a solution, cloud gives me just that – a platform that simply runs my solution and abstracts the sysadmin ugliness away.

I have experienced both sides, including UNIX kernel and system programming, and I don't want to even think about sysadmin unless I want to tinker with a UNIX box on a weekend as a leisure activity.
H1Bs I've seen were treated worse than American workers or seemed to work at a roughly 60% of American jobs. No American would take a job posted for a 40% paycut, regardless of the title. The system is being gamed.
This regulation has been known about and in the works a long time, so it drove device manufacturers to unify their devices over their model generational upgrades leading up to this moment. They didn’t do it voluntarely.

Smooth transition was the intent - not costly surprise for manufacturers over night.

Remember, we started from:
- USB-A

- Micro-USB

- Mini-USB

- USB-C

- Lightning
From my experience and going from most to least important, I use:

The Dvorak keyboard layout,

A split keyboard (two separate halves)

A tented keyboard (center raised up)

A vertical mouse

I haven't tried a tiny keyboard, I didn't like the idea - I want to press F5 or PgDn with one hand, for example.
Maybe we have different understandings of what extremely small is (including that emphasis) but an LLM is not that by definition (the first L). I'm no expert either but the smaller value mentioned is 13e9. If these things are 8-bit integers, that's 13 GB data (more for a normal integer or a float). That's a significant percentage of long term storage on a phone (especially Apple models) let alone that it would fit in RAM on even most desktops which is afaik required for useful speeds. Taking this as upper bound and saying it must be extremely small to encode only landmarks, idk. I'd be impressed if it's down to a few dozen megabytes, but with potentially hundreds of such mildly useful neural nets, it adds up and isn't so small that you'd include it as a no-brainer either
Lobste.rs: Lockfiles Considered Harmful
Plane was likely going too fast for EMAS to be effective.
You're seriously arguing that it's absurd for customers to have "absolute control" over all software?

No EU regulation could regulate away all "moral" concerns over software. More specifically, they EU could regulate, but the overwhelming majority of software companies would either strip significant features out for EU customers, or exit the market altogether.
This could be great if it were written in a reliable language like Rust and not something like C#.
>But Trump doesn't lie like that, he lies about everything all the time. He lies about things that are obviously untrue, right there in front of you.

Again you describe what most politicians do. Trump's lying is not quantitatively nor qualitatively more severe than any other politician at that level, certainly not more than Biden or Kamala.

>He's not a "liar" in the way most people are. He's a liar in the sense that you are in on the lie, that you understand the lie is a lie.

I don't buy this.

>But this is a guy with a 4 year term already behind him. This is a guy running to stay out of jail. This is the guy people voted for. More than in 2016, more than in 2020. More across all demographics. More in 90% of counties .

Need I remind you that Biden pardoned his son for a huge period of time and undisclosed crimes which he himself might be an accomplice?

>The voter understands the pain that is coming, and embraces it as necessary for the coming greatness. The willingness to put their own suffering aside, to willingly endure the oncoming hardships, to vote against their personal best interest is admirable.

I don't think this is what happened. Although the Trump campaign did make vague references to temporary pain, it explicitly denied that any benefits would be cut or taxes increased (except for the tariffs). People are suffering because of high inflation and a stagnant economy. They see hundreds of billions of dollars go abroad as we struggle to cover expenses at home. They are not down for more taxes, reduced benefits, or any such thing. You're bending over backward to say that voters want the exact opposite of what they were promised, and that's ridiculous.

I don't know how many people think our Western lifestyles are sustainable. One thing is for sure though. If you're a politician and you admit defeat, and say we can't possibly have the lifestyles we've had for many decades without some kind of awful intervention like a massive war, high taxes, or cuts to essential services, you're guaranteeing your own loss. People want to believe there is a way, and they're not ready to give up their way of life yet just because some politician says they aren't being reasonable or they don't deserve it.
The thing I don’t like about Kagi is how you have to be logged in with an email to search.

I wish they’d setup something like Mullvad where you get an account number, pay for said account, and that’s it.
The power of defaults is strong.

Most people using the device will never go into the notification settings, if an app on install tells you they need notifications to tell you about your driver arriving…and then sends you marketing notifications on the same channel most people will just accept that.
Swirls on my phone.
I've watched enough Air Crash Investigation to be scared of Airbus too
I don't want to hate on your side project, but the AI is clearly hallucinating things to fit the job description. In the ServiceNow result (first I saw with an interview/reject difference), the custom resume claims Jenkins experience, which is in the job listing but nowhere in either the AI base or generic resumes. Same for NinjaTrader and distributed systems + Scala + Github Actions, Upside and data engineering, BigTime and C#.
OpenBSD is unusable as a server. No checksumming filesystem. No even TRIM for SSD.
Yeah this seems to be on by default for me as well, I definitely take issue with that.
hahaha, i was thinking the same when i read it, such an odd way to phrase it.

“Mouth to mouth” lol
I never took the term "western" to be purely geographical
A bird strike in one engine could disrupt hydraulics yes but not all three circuits. It's weird. I'm sure there's more to this story.

Also the landing gear can be extended though gravity even without hydraulic pressure.
Apple also makes a mandatory API call to captive.apple.com from every device with a web view, just about every time they connect to a network.

If someone is willing to take a hardline stance that a vendor should inform the user and require opt-in consent for every type of exchange, they are going to have to run platforms specifically targeted toward that mindset.
I appreciate your passion for privacy-respecting technology and your clarification. You make good points about the nuances of privacy-preserving techniques. However, I think we can separate two distinct issues:

1. The technical excellence of Apple's privacy protections (which you've explained well and seem robust)

2. The ethical question of enabling data transmission by default

Even with best-in-class privacy protections, the principle of user agency matters. A simplified prompt like "This feature will analyze your photos locally and send secure, anonymized data to Apple's servers to enable better search" would give users the basic choice while being technically accurate. The technical sophistication of the privacy measures, while commendable, doesn't override the need for informed consent.
The obvious difference is that by sending your photos with Signal, you are doing it willingly. You let it encrypt and decrypt willingly. You decide who gets it.

Here, Apple does that for you.
> Trump lies all the time.

Of course the politician does this, but if you think this somehow granted you carte blanche to write out of your ass you are a special kind of delusional.
as a designer myself, I assure you more than half of these are intentional. we dream for these kinds of shenanigans
Welding, foraging, scavenging, hacking, repurposing old junk into shelter and transportation, hydroponics, stealing electricity, small scale farming, digging, ammo reloading, evading AI, creating improvised explosive devices, smuggling, ICE breaking, soldering / electronics fabrication and repair, firearms maintenance, diesel mechanics, broadcasting pirate radio and television...
This is just the incompetent tip of the iceberg.
I use Vim (recently switched to Neovim on my work laptop) as my daily driver with a minimum set of plugins. My primary language right now is Go, but used to be C++. It works just fine for my purpose. I have tried using IDEs in the past, most recently vscode when I was trying to learn Rust, I always end up going back to Vim, I find it more a more enjoyable and streamlined experience. For IDEs it's usually a struggle getting everything to work for me, and if there is a new version it just ends up breaking everything. I'm sure it's just a matter of what I'm used to.
However I learned JAVA at university and it's the one language I have never managed to come to terms with using vim. At university I used Netbeans and I think that remains my one positive experience with IDEs. I really liked how that worked (or maybe I just hadn't been conditioned that much at that point). Java seems to be designed around the idea that you should user an IDE though. Sooo Verbose, and so many frameworks...
Thanks, yea I thought about separating the search but felt like when you're looking for that piece of knowledge it can extend to the hadith and it was important to include it. So much of the Quran is explained in the context of the hadith and prophet's life.
Bear in mind that IBM has been making computers — and terminology — since the 1950s. They invented hard drives. So it seems wrong to say their terminology has “diverged”…from what?

IBM terminals like the 3270 operate almost like a web browser, with form fields implemented by the terminal. The computer sends a page of text, you use the terminal to edit it, and you submit data back. That’s why you have to move around the screen to type things in the right place, and thus why the editor has “line commands”.